firefox.settings.services.mozilla.com/v1/
200 OK 939 B URL HTTP/1.1 firefox.settings.services.mozilla.com/v1/
IP
File type JSON data\012- , ASCII text, with very long lines (939), with no line terminators
Hash cd8d0809aa5948f2a6ee41d2158861af
098cd24ac587cdc70137af412678526de4d43969
88e6741d6bf076bf7132c7cf98456702cc775476095aafd839888edff52fb03e
GET /v1/ HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Content-Type: application/json
Content-Length: 939
Connection: keep-alive
Access-Control-Allow-Origin: *
Access-Control-Expose-Headers: Backoff, Alert, Retry-After, Content-Length, Content-Type
Cache-Control: max-age=3600
Content-Security-Policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
Date: Tue, 25 Oct 2022 03:53:05 GMT
Expires: Tue, 25 Oct 2022 04:32:34 GMT
Strict-Transport-Security: max-age=31536000
X-Content-Type-Options: nosniff
X-Cache: Hit from cloudfront
Via: 1.1 142be88a35733307a5e7de05da0a20b8.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-C1
X-Amz-Cf-Id: ZJ6lIgWUFP2d3xlczOwjTs4UaBUo9B8WwM5_6-34D36DNdagHRRg2w==
Age: 3147
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash b3537658770790ad6cf0d727f0c0acd2
8365cadda05ef27b2ebd627d545e31886b512bde
df992311f130f15459739841de925c7eec2604d5a68ca6b2a67b6dc8d229212c
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "DF992311F130F15459739841DE925C7EEC2604D5A68CA6B2A67B6DC8D229212C"
Last-Modified: Mon, 24 Oct 2022 00:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=12154
Expires: Tue, 25 Oct 2022 08:08:06 GMT
Date: Tue, 25 Oct 2022 04:45:32 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash ae56efd62a0d9249d98573172eb8b28b
5ff4e9959be677ad76c26ca73f9ef4feb9fa2f28
82d9ee4948fce839f7edb1f8490c4213cded3912464a4169b0bf6a61278694bd
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "82D9EE4948FCE839F7EDB1F8490C4213CDED3912464A4169B0BF6A61278694BD"
Last-Modified: Sat, 22 Oct 2022 14:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=7219
Expires: Tue, 25 Oct 2022 06:45:51 GMT
Date: Tue, 25 Oct 2022 04:45:32 GMT
Connection: keep-alive
content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2022-11-19-18-50-54.chain
200 OK 5.3 kB URL HTTP/2 content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2022-11-19-18-50-54.chain
IP
File type PEM certificate\012- , ASCII text
Hash 67d5a988edcda47bc3b3b3f65d32b4b6
d4f0e0da8b3690cc7da925026d3414b68c7d954f
55e4848e3ec682e808ce7ee70950f86179c43af4f81926d826a95edfda395a78
GET /chains/remote-settings.content-signature.mozilla.org-2022-11-19-18-50-54.chain HTTP/1.1
Host: content-signature-2.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
x-amz-id-2: z8dkSsj7oK+k1cCUF/ByClGP4wv1ZzH20gAzKpLn8Ykom+lOModc6XR69xtx3+81infubEMtQUs=
x-amz-request-id: E6N7S7GEN6NPP9JS
content-disposition: attachment
accept-ranges: bytes
server: AmazonS3
content-length: 5348
via: 1.1 google
date: Tue, 25 Oct 2022 04:08:47 GMT
age: 2205
last-modified: Fri, 30 Sep 2022 18:50:55 GMT
etag: "67d5a988edcda47bc3b3b3f65d32b4b6"
content-type: binary/octet-stream
cache-control: public,max-age=3600
alt-svc: clear
X-Firefox-Spdy: h2
westernbioorganics.com/
200 OK 6.9 kB IP
ASN #394695 PUBLIC-DOMAIN-REGISTRY
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document text\012- exported SGML document, Unicode text, UTF-8 text, with very long lines (808), with CRLF line terminators
Hash 1a9ac106c505ebd0ad10ee19aa879c9e
2c70127a7e8a2696cdc7fa7ca15eb1f2f1cba27a
8ad4897a947d4eca16076c46e6fadf38e9884bec9059899d834b0cd937608746
Analyzer Verdict Alert fortinet Malware
mnemonic_dns Sinkholed
quad9 Sinkholed
GET / HTTP/1.1
Host: westernbioorganics.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Upgrade-Insecure-Requests: 1
HTTP/1.1 200 OK
Date: Tue, 25 Oct 2022 04:45:32 GMT
Server: Apache
Upgrade: h2,h2c
Connection: Upgrade, Keep-Alive
Last-Modified: Fri, 29 Apr 2022 06:21:19 GMT
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 6941
Keep-Alive: timeout=5, max=75
Content-Type: text/html
contile.services.mozilla.com/v1/tiles
200 OK 12 B URL HTTP/2 contile.services.mozilla.com/v1/tiles
IP
File type JSON data\012- , ASCII text, with no line terminators
Hash 23e88fb7b99543fb33315b29b1fad9d6
a48926c4ec03c7c8a4e8dffcd31e5a6cdda417ce
7d8f1de8b7de7bc21dfb546a1d0c51bf31f16eee5fad49dbceae1e76da38e5c3
GET /v1/tiles HTTP/1.1
Host: contile.services.mozilla.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Tue, 25 Oct 2022 04:45:32 GMT
content-type: application/json
content-length: 12
strict-transport-security: max-age=31536000
via: 1.1 google
alt-svc: clear
X-Firefox-Spdy: h2
westernbioorganics.com/assets/css/plugins/animate.min.css
200 OK 5.6 kB URL HTTP/1.1 westernbioorganics.com/assets/css/plugins/animate.min.css
IP
ASN #394695 PUBLIC-DOMAIN-REGISTRY
File type ASCII text, with very long lines (57915), with CRLF line terminators
Hash fb868bf4f1e3e1af798f8525c3ba85e2
2e7aaf6b3d5589eada438fe3f7f5c1f1257dfa6f
96787341701a39ad65211dab72d1b826de5b2d9603ed2e98208f0e1fe3a57efd
Analyzer Verdict Alert mnemonic_dns Sinkholed
quad9 Sinkholed
GET /assets/css/plugins/animate.min.css HTTP/1.1
Host: westernbioorganics.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://westernbioorganics.com/
HTTP/1.1 200 OK
Date: Tue, 25 Oct 2022 04:45:32 GMT
Server: Apache
Last-Modified: Sat, 30 Nov 2019 17:41:26 GMT
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 5603
Keep-Alive: timeout=5, max=74
Connection: Keep-Alive
Content-Type: text/css
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash f1ae675435a8f16bc0b04ec012c41979
182f87a81464c80b0b25fb524c59592cd40b0ef4
9191ced121d8740b4ed3af75db3033e72c0c44c0b45004abd714583deaa749a4
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Tue, 25 Oct 2022 04:45:32 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
www.googletagmanager.com/gtag/js?id=G-BRMDVE1G0B
200 OK 77 kB URL HTTP/2 www.googletagmanager.com/gtag/js?id=G-BRMDVE1G0B
IP
File type ASCII text, with very long lines (18991)
Hash 3150606624c6c4773b1c6c94452b0a26
0a870bd7ef6e064b025569e8b33400afbaad62c4
b15bfd0867eee3213da6c506972e217009e085fc5e66596b35a72c12c06a7f44
GET /gtag/js?id=G-BRMDVE1G0B HTTP/1.1
Host: www.googletagmanager.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://westernbioorganics.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: application/javascript; charset=UTF-8
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-headers: Cache-Control
content-encoding: br
vary: Accept-Encoding
date: Tue, 25 Oct 2022 04:45:32 GMT
expires: Tue, 25 Oct 2022 04:45:32 GMT
cache-control: private, max-age=900
strict-transport-security: max-age=31536000; includeSubDomains
cross-origin-resource-policy: cross-origin
server: Google Tag Manager
content-length: 77022
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash f1ae675435a8f16bc0b04ec012c41979
182f87a81464c80b0b25fb524c59592cd40b0ef4
9191ced121d8740b4ed3af75db3033e72c0c44c0b45004abd714583deaa749a4
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Tue, 25 Oct 2022 04:45:32 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
westernbioorganics.com/assets/css/plugins/slick.css
200 OK 575 B URL HTTP/1.1 westernbioorganics.com/assets/css/plugins/slick.css
IP
ASN #394695 PUBLIC-DOMAIN-REGISTRY
Hash c7cd7eaaeceb626699c3f61cf0d97b31
7930a73cbfbc0683ebf12b982b4ec0ddf3498852
9782a15945372abd060dd052ac7e93e7239f7f4ac20ff8716c8f554a2e78855f
Analyzer Verdict Alert mnemonic_dns Sinkholed
quad9 Sinkholed
GET /assets/css/plugins/slick.css HTTP/1.1
Host: westernbioorganics.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://westernbioorganics.com/
HTTP/1.1 200 OK
Date: Tue, 25 Oct 2022 04:45:32 GMT
Server: Apache
Upgrade: h2,h2c
Connection: Upgrade, Keep-Alive
Last-Modified: Tue, 03 Oct 2017 20:49:30 GMT
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 575
Keep-Alive: timeout=5, max=75
Content-Type: text/css
westernbioorganics.com/assets/css/plugins/magnific-popup.css
200 OK 2.2 kB URL HTTP/1.1 westernbioorganics.com/assets/css/plugins/magnific-popup.css
IP
ASN #394695 PUBLIC-DOMAIN-REGISTRY
File type ASCII text, with CRLF line terminators
Hash ce20cf26c4d9f37e1cb86b80c297249b
ddc4415debbcbcdb9348f447ea3cc6924d646ab2
e8005afb3a26100bbb5946e02112ca1e3999b4a19d92b363cce47e515fb226a4
Analyzer Verdict Alert mnemonic_dns Sinkholed
quad9 Sinkholed
GET /assets/css/plugins/magnific-popup.css HTTP/1.1
Host: westernbioorganics.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://westernbioorganics.com/
HTTP/1.1 200 OK
Date: Tue, 25 Oct 2022 04:45:32 GMT
Server: Apache
Upgrade: h2,h2c
Connection: Upgrade, Keep-Alive
Last-Modified: Wed, 29 May 2019 09:11:10 GMT
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 2226
Keep-Alive: timeout=5, max=75
Content-Type: text/css
westernbioorganics.com/assets/fonts/flaticon/flaticon.css
200 OK 540 B URL HTTP/1.1 westernbioorganics.com/assets/fonts/flaticon/flaticon.css
IP
ASN #394695 PUBLIC-DOMAIN-REGISTRY
Hash 07bee9ef39f67445ccfeaf07cdcd7674
0f851eb1547ba5bf7e796771b13e03a6cbc6559a
d303393229efeecf3fa21076b192f12e6238c7d459160fb916e308a35f0ea255
Analyzer Verdict Alert mnemonic_dns Sinkholed
quad9 Sinkholed
GET /assets/fonts/flaticon/flaticon.css HTTP/1.1
Host: westernbioorganics.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://westernbioorganics.com/
HTTP/1.1 200 OK
Date: Tue, 25 Oct 2022 04:45:32 GMT
Server: Apache
Upgrade: h2,h2c
Connection: Upgrade, Keep-Alive
Last-Modified: Wed, 22 Apr 2020 19:20:34 GMT
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 540
Keep-Alive: timeout=5, max=75
Content-Type: text/css
westernbioorganics.com/assets/fonts/font-awesome/css/all.min.css
200 OK 10 kB URL HTTP/1.1 westernbioorganics.com/assets/fonts/font-awesome/css/all.min.css
IP
ASN #394695 PUBLIC-DOMAIN-REGISTRY
File type ASCII text, with very long lines (46750)
Hash 566fbcdc68f121509e0764c29e81cf6e
21fa6a74207791cfaa1e98fe6433c8938de40d57
f004788e8c5d94b5f7d3b2e466244a5831d3fa0f461c784a5dcba7c9736a8fc9
Analyzer Verdict Alert mnemonic_dns Sinkholed
quad9 Sinkholed
GET /assets/fonts/font-awesome/css/all.min.css HTTP/1.1
Host: westernbioorganics.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://westernbioorganics.com/
HTTP/1.1 200 OK
Date: Tue, 25 Oct 2022 04:45:32 GMT
Server: Apache
Upgrade: h2,h2c
Connection: Upgrade, Keep-Alive
Last-Modified: Thu, 23 Aug 2018 10:54:08 GMT
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 10221
Keep-Alive: timeout=5, max=75
Content-Type: text/css
westernbioorganics.com/assets/css/plugins/bootstrap.min.css
200 OK 31 kB URL HTTP/1.1 westernbioorganics.com/assets/css/plugins/bootstrap.min.css
IP
ASN #394695 PUBLIC-DOMAIN-REGISTRY
File type ASCII text, with very long lines (65324)
Hash eefce038387a7a2651702f7e81175f69
24bb2c6600414bf46f9f134219e79b8fb8da5285
fd2863de0b08b27d4818c7c6680fba2ec412483930f4f6f07ddffdbbfd7e6adf
Analyzer Verdict Alert mnemonic_dns Sinkholed
quad9 Sinkholed
GET /assets/css/plugins/bootstrap.min.css HTTP/1.1
Host: westernbioorganics.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://westernbioorganics.com/
HTTP/1.1 200 OK
Date: Tue, 25 Oct 2022 04:45:32 GMT
Server: Apache
Upgrade: h2,h2c
Connection: Upgrade, Keep-Alive
Last-Modified: Mon, 23 Jul 2018 15:37:28 GMT
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
Keep-Alive: timeout=5, max=75
Transfer-Encoding: chunked
Content-Type: text/css
westernbioorganics.com/assets/css/style.css
200 OK 27 kB URL HTTP/1.1 westernbioorganics.com/assets/css/style.css
IP
ASN #394695 PUBLIC-DOMAIN-REGISTRY
File type ASCII text, with CRLF line terminators
Hash e302b5ac10a0504ad76e470c6562f606
5d9df59f9d606bfcdb81f07f443817bfd18517a0
210ccb189b0c29c576b419e5a1033ee6dd9f0670adeca12225e7ccb082bb8aec
Analyzer Verdict Alert mnemonic_dns Sinkholed
quad9 Sinkholed
GET /assets/css/style.css HTTP/1.1
Host: westernbioorganics.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://westernbioorganics.com/
HTTP/1.1 200 OK
Date: Tue, 25 Oct 2022 04:45:32 GMT
Server: Apache
Last-Modified: Mon, 11 Apr 2022 06:08:06 GMT
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
Keep-Alive: timeout=5, max=73
Connection: Keep-Alive
Transfer-Encoding: chunked
Content-Type: text/css
westernbioorganics.com/simplelightbox-master/simplelightbox-master/dist/simple-lightbox.css?v2.8.0
200 OK 1.3 kB URL HTTP/1.1 westernbioorganics.com/simplelightbox-master/simplelightbox-master/dist/simple-lightbox.css?v2.8.0
IP
ASN #394695 PUBLIC-DOMAIN-REGISTRY
File type Unicode text, UTF-8 text, with CRLF, LF line terminators
Hash 2045443404bd220503d559c3068fc3d7
fea5bb5477736f62dfa0dbd36a13b55589d3d01d
6d5bbc93ec64c3329cbb6be17f155a2212e7e257661a9c2b4bea8a72ea106edb
Analyzer Verdict Alert fortinet Malware
mnemonic_dns Sinkholed
quad9 Sinkholed
GET /simplelightbox-master/simplelightbox-master/dist/simple-lightbox.css?v2.8.0 HTTP/1.1
Host: westernbioorganics.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://westernbioorganics.com/
HTTP/1.1 200 OK
Date: Tue, 25 Oct 2022 04:45:32 GMT
Server: Apache
Last-Modified: Fri, 28 Jan 2022 14:17:18 GMT
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 1285
Keep-Alive: timeout=5, max=74
Connection: Keep-Alive
Content-Type: text/css
westernbioorganics.com/assets/js/plugins/popper.min.js
200 OK 8.7 kB URL HTTP/1.1 westernbioorganics.com/assets/js/plugins/popper.min.js
IP
ASN #394695 PUBLIC-DOMAIN-REGISTRY
File type ASCII text, with very long lines (20363)
Hash 5b52c8b4bc5721d909c8833027152491
913b3c81aa85ba8fff02f4a0dc48f4c4f0d448d9
b3d4cc40cfe649573b5019466856b702f8df13e45622bd831d6f555d44d42710
Analyzer Verdict Alert fortinet Malware
mnemonic_dns Sinkholed
quad9 Sinkholed
GET /assets/js/plugins/popper.min.js HTTP/1.1
Host: westernbioorganics.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://westernbioorganics.com/
HTTP/1.1 200 OK
Date: Tue, 25 Oct 2022 04:45:32 GMT
Server: Apache
Last-Modified: Fri, 28 Jun 2019 06:37:40 GMT
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 8705
Keep-Alive: timeout=5, max=74
Connection: Keep-Alive
Content-Type: application/javascript
westernbioorganics.com/assets/js/plugins/waypoint.js
200 OK 3.6 kB URL HTTP/1.1 westernbioorganics.com/assets/js/plugins/waypoint.js
IP
ASN #394695 PUBLIC-DOMAIN-REGISTRY
File type Unicode text, UTF-8 text, with very long lines (10118)
Hash d689279dc4ea2dd1b1dae66c9e085881
b2909079dd18ba5a414ca58174840be29a5e1b2e
5d353d57f87dff59058021dc9ac7a3a46802271940e878106719228066ab1656
Analyzer Verdict Alert fortinet Malware
mnemonic_dns Sinkholed
quad9 Sinkholed
GET /assets/js/plugins/waypoint.js HTTP/1.1
Host: westernbioorganics.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://westernbioorganics.com/
HTTP/1.1 200 OK
Date: Tue, 25 Oct 2022 04:45:32 GMT
Server: Apache
Last-Modified: Fri, 22 Nov 2019 09:33:14 GMT
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 3607
Keep-Alive: timeout=5, max=74
Connection: Keep-Alive
Content-Type: application/javascript
westernbioorganics.com/assets/js/plugins/bootstrap.min.js
200 OK 21 kB URL HTTP/1.1 westernbioorganics.com/assets/js/plugins/bootstrap.min.js
IP
ASN #394695 PUBLIC-DOMAIN-REGISTRY
File type ASCII text, with very long lines (50758)
Hash 8eef780162d3744d08f300e970637a44
ba2abbc4b995d1d5c18e9e7d32e87dce31324331
6f33c4c0ce89765d40d5a0d1a447ec9bc08b6710e03b5df7f37c0f2d44cf120d
Analyzer Verdict Alert fortinet Malware
mnemonic_dns Sinkholed
quad9 Sinkholed
GET /assets/js/plugins/bootstrap.min.js HTTP/1.1
Host: westernbioorganics.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://westernbioorganics.com/
HTTP/1.1 200 OK
Date: Tue, 25 Oct 2022 04:45:32 GMT
Server: Apache
Last-Modified: Mon, 23 Jul 2018 15:37:42 GMT
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
Keep-Alive: timeout=5, max=74
Connection: Keep-Alive
Transfer-Encoding: chunked
Content-Type: application/javascript
firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US
200 OK 329 B URL HTTP/1.1 firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US
IP
File type JSON data\012- , ASCII text, with very long lines (329), with no line terminators
Hash 0333b0655111aa68de771adfcc4db243
63f295a144ac87a7c8e23417626724eeca68a7eb
60636eb1dc67c9ed000fe0b49f03777ad6f549cb1d2b9ff010cf198465ae6300
GET /v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/json
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Content-Type: application/json
Content-Length: 329
Connection: keep-alive
Access-Control-Allow-Origin: *
Access-Control-Expose-Headers: ETag, Expires, Content-Length, Cache-Control, Pragma, Content-Type, Alert, Backoff, Last-Modified, Retry-After
Content-Security-Policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
Last-Modified: Fri, 25 Mar 2022 17:45:46 GMT
Strict-Transport-Security: max-age=31536000
X-Content-Type-Options: nosniff
Cache-Control: max-age=3600
Date: Tue, 25 Oct 2022 04:33:32 GMT
Expires: Tue, 25 Oct 2022 05:03:02 GMT
ETag: "1648230346554"
X-Cache: Hit from cloudfront
Via: 1.1 6cb1d4b545e7beb4ead790454f4807c6.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-C1
X-Amz-Cf-Id: DEfZqA5Q82iIuTs9duSKRj3Zd3YmA6nIqnSpr31mCfZem9nUDheT9g==
Age: 721
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash d114ab00b1cfe7f9b4f56c7b3655b55d
641e580d6148329b0c9eb2d49f5f8a30c08f30e9
e5420e919b2c05c148179c7d85a210941be6862b1f65ccfafcfc38d960bf38d7
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Tue, 25 Oct 2022 04:45:33 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash d114ab00b1cfe7f9b4f56c7b3655b55d
641e580d6148329b0c9eb2d49f5f8a30c08f30e9
e5420e919b2c05c148179c7d85a210941be6862b1f65ccfafcfc38d960bf38d7
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Tue, 25 Oct 2022 04:45:33 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
westernbioorganics.com/assets/js/plugins/jquery-3.4.1.min.js
200 OK 39 kB URL HTTP/1.1 westernbioorganics.com/assets/js/plugins/jquery-3.4.1.min.js
IP
ASN #394695 PUBLIC-DOMAIN-REGISTRY
File type ASCII text, with very long lines (65450), with CRLF line terminators
Hash cac4a0e0236c3d18bda2e5ae4051ca2a
ab81d3b81021f25fe096fc9e9032a952e32aa057
1a244313cc5c678de718c976ee71d6d6fe1e20b62691cf00933dbd9f76df3ff6
Analyzer Verdict Alert fortinet Malware
mnemonic_dns Sinkholed
quad9 Sinkholed
GET /assets/js/plugins/jquery-3.4.1.min.js HTTP/1.1
Host: westernbioorganics.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://westernbioorganics.com/
HTTP/1.1 200 OK
Date: Tue, 25 Oct 2022 04:45:32 GMT
Server: Apache
Last-Modified: Fri, 15 Nov 2019 10:41:58 GMT
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
Keep-Alive: timeout=5, max=74
Connection: Keep-Alive
Transfer-Encoding: chunked
Content-Type: application/javascript
westernbioorganics.com/assets/js/plugins/jquery.magnific-popup.min.js
200 OK 9.2 kB URL HTTP/1.1 westernbioorganics.com/assets/js/plugins/jquery.magnific-popup.min.js
IP
ASN #394695 PUBLIC-DOMAIN-REGISTRY
File type ASCII text, with very long lines (20087), with CRLF line terminators
Hash 988289756c037bb0681eb46c632c3ba5
8327b20ee783345d4333df7ad1f69e2dd2767f5f
abcf4d4666ef0f6e42ef979c17894322d0f4022efeb7b95db5ed8cdf562d5479
Analyzer Verdict Alert fortinet Malware
mnemonic_dns Sinkholed
quad9 Sinkholed
GET /assets/js/plugins/jquery.magnific-popup.min.js HTTP/1.1
Host: westernbioorganics.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://westernbioorganics.com/
HTTP/1.1 200 OK
Date: Tue, 25 Oct 2022 04:45:33 GMT
Server: Apache
Last-Modified: Wed, 29 May 2019 09:11:10 GMT
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 9206
Keep-Alive: timeout=5, max=72
Connection: Keep-Alive
Content-Type: application/javascript
westernbioorganics.com/assets/js/plugins/jquery.slimScroll.min.js
200 OK 2.1 kB URL HTTP/1.1 westernbioorganics.com/assets/js/plugins/jquery.slimScroll.min.js
IP
ASN #394695 PUBLIC-DOMAIN-REGISTRY
File type ASCII text, with very long lines (531), with CRLF line terminators
Hash 90515cd5137a66717e1143f2d4dc23ae
fb617ad7a94264c44b84f229dbc0c5a2e68dff43
2b15901ecb2dbf0497040cb77fcebd5c7666b5f84974aea0db49be47db90dbc8
Analyzer Verdict Alert fortinet Malware
mnemonic_dns Sinkholed
quad9 Sinkholed
GET /assets/js/plugins/jquery.slimScroll.min.js HTTP/1.1
Host: westernbioorganics.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://westernbioorganics.com/
HTTP/1.1 200 OK
Date: Tue, 25 Oct 2022 04:45:33 GMT
Server: Apache
Last-Modified: Mon, 06 Jan 2020 09:03:42 GMT
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 2053
Keep-Alive: timeout=5, max=73
Connection: Keep-Alive
Content-Type: application/javascript
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash d114ab00b1cfe7f9b4f56c7b3655b55d
641e580d6148329b0c9eb2d49f5f8a30c08f30e9
e5420e919b2c05c148179c7d85a210941be6862b1f65ccfafcfc38d960bf38d7
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Tue, 25 Oct 2022 04:45:33 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
westernbioorganics.com/assets/js/plugins/imagesloaded.min.js
200 OK 2.1 kB URL HTTP/1.1 westernbioorganics.com/assets/js/plugins/imagesloaded.min.js
IP
ASN #394695 PUBLIC-DOMAIN-REGISTRY
File type ASCII text, with very long lines (5477), with CRLF line terminators
Hash c97731c63b57931b75d3bde2cc9f2780
d8dd9516aedd948d57570ca40001396cdd745efb
5d19c96b4b7038ef2f3c6ffcf4ddbbcce7f4668cf5e3ce7d7ad8c10eb4944ff5
Analyzer Verdict Alert fortinet Malware
mnemonic_dns Sinkholed
quad9 Sinkholed
GET /assets/js/plugins/imagesloaded.min.js HTTP/1.1
Host: westernbioorganics.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://westernbioorganics.com/
HTTP/1.1 200 OK
Date: Tue, 25 Oct 2022 04:45:33 GMT
Server: Apache
Last-Modified: Wed, 29 May 2019 09:11:10 GMT
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 2088
Keep-Alive: timeout=5, max=73
Connection: Keep-Alive
Content-Type: application/javascript
westernbioorganics.com/assets/js/plugins/jquery.steps.min.js
200 OK 5.9 kB URL HTTP/1.1 westernbioorganics.com/assets/js/plugins/jquery.steps.min.js
IP
ASN #394695 PUBLIC-DOMAIN-REGISTRY
File type ASCII text, with very long lines (13686)
Hash e4d07496e6a588276716c4e03201fb8b
78ac88822169598e57565b3322f7ad35324dd518
680524a27ae46af68a6ca367753a832c1834afb04d94e1283f72bd68ee443606
Analyzer Verdict Alert fortinet Malware
mnemonic_dns Sinkholed
quad9 Sinkholed
GET /assets/js/plugins/jquery.steps.min.js HTTP/1.1
Host: westernbioorganics.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://westernbioorganics.com/
HTTP/1.1 200 OK
Date: Tue, 25 Oct 2022 04:45:33 GMT
Server: Apache
Last-Modified: Thu, 04 Sep 2014 18:53:56 GMT
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 5933
Keep-Alive: timeout=5, max=73
Connection: Keep-Alive
Content-Type: application/javascript
westernbioorganics.com/assets/js/plugins/jquery.countdown.min.js
200 OK 2.5 kB URL HTTP/1.1 westernbioorganics.com/assets/js/plugins/jquery.countdown.min.js
IP
ASN #394695 PUBLIC-DOMAIN-REGISTRY
File type ASCII text, with very long lines (3854)
Hash ad260149b54fb80a7c0393ee10d47b5e
4edef6c9b850ea430b35f07a7bbcb0ca99bb6897
2ea259df63322ef84c6284e910ac692f44a5cd7ca437b00541beca2d48cce661
Analyzer Verdict Alert fortinet Malware
mnemonic_dns Sinkholed
quad9 Sinkholed
GET /assets/js/plugins/jquery.countdown.min.js HTTP/1.1
Host: westernbioorganics.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://westernbioorganics.com/
HTTP/1.1 200 OK
Date: Tue, 25 Oct 2022 04:45:33 GMT
Server: Apache
Last-Modified: Fri, 14 Aug 2015 05:14:12 GMT
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 2451
Keep-Alive: timeout=5, max=73
Connection: Keep-Alive
Content-Type: application/javascript
ocsp.digicert.com/
200 OK 471 B IP
Hash 7c6fdc8e76ef5875b5c965ade2df503e
45d548aa2a9d7ede163743274790700878eaea62
d2ff6eacd48af4892a2642e5d7bb925ca683062139f5a5cb4047f6f706830618
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 2565
Cache-Control: max-age=101037
Content-Type: application/ocsp-response
Date: Tue, 25 Oct 2022 04:45:33 GMT
Etag: "63564795-1d7"
Expires: Wed, 26 Oct 2022 08:49:30 GMT
Last-Modified: Mon, 24 Oct 2022 08:06:45 GMT
Server: ECS (ska/F717)
X-Cache: HIT
Content-Length: 471
westernbioorganics.com/assets/js/plugins/slick.min.js
200 OK 14 kB URL HTTP/1.1 westernbioorganics.com/assets/js/plugins/slick.min.js
IP
ASN #394695 PUBLIC-DOMAIN-REGISTRY
File type ASCII text, with very long lines (42862)
Hash e61b26be7b27fbf2a5c2f479364c12b8
ff046102856e16854639a9862521c193fa05e9d7
19f098db827ce2943ab549c6fb9b142c4cc70aa9ecd7d3afc657a3a0eed8be88
Analyzer Verdict Alert fortinet Malware
mnemonic_dns Sinkholed
quad9 Sinkholed
GET /assets/js/plugins/slick.min.js HTTP/1.1
Host: westernbioorganics.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://westernbioorganics.com/
HTTP/1.1 200 OK
Date: Tue, 25 Oct 2022 04:45:33 GMT
Server: Apache
Last-Modified: Tue, 03 Oct 2017 20:49:30 GMT
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 14332
Keep-Alive: timeout=5, max=71
Connection: Keep-Alive
Content-Type: application/javascript
westernbioorganics.com/assets/js/plugins/isotope.pkgd.min.js
200 OK 13 kB URL HTTP/1.1 westernbioorganics.com/assets/js/plugins/isotope.pkgd.min.js
IP
ASN #394695 PUBLIC-DOMAIN-REGISTRY
File type ASCII text, with very long lines (32001), with CRLF line terminators
Hash eba06a8b7737d0611d46bce7a09a236b
1ec71a3645e52fd2b1ea71fc74531f38e74d4cf9
bc4d192b6396f0b024f8e754ca84fcd354666ca5db7cd428840fd4dab3feff21
Analyzer Verdict Alert fortinet Malware
mnemonic_dns Sinkholed
quad9 Sinkholed
GET /assets/js/plugins/isotope.pkgd.min.js HTTP/1.1
Host: westernbioorganics.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://westernbioorganics.com/
HTTP/1.1 200 OK
Date: Tue, 25 Oct 2022 04:45:33 GMT
Server: Apache
Last-Modified: Wed, 27 Nov 2019 14:51:42 GMT
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 13084
Keep-Alive: timeout=5, max=73
Connection: Keep-Alive
Content-Type: application/javascript
westernbioorganics.com/assets/js/plugins/ion.rangeSlider.min.js
200 OK 11 kB URL HTTP/1.1 westernbioorganics.com/assets/js/plugins/ion.rangeSlider.min.js
IP
ASN #394695 PUBLIC-DOMAIN-REGISTRY
File type Unicode text, UTF-8 text, with very long lines (41067)
Hash 67b1b6e83b475268c527de70ba4c3d5c
ba95fc4a0aba2e7b9391bab67d68ec74bb6f08b9
447d70794da106e032e71ba6f44e4a7b68449f899f76135818d294837cd3af35
Analyzer Verdict Alert fortinet Malware
mnemonic_dns Sinkholed
quad9 Sinkholed
GET /assets/js/plugins/ion.rangeSlider.min.js HTTP/1.1
Host: westernbioorganics.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://westernbioorganics.com/
HTTP/1.1 200 OK
Date: Tue, 25 Oct 2022 04:45:33 GMT
Server: Apache
Last-Modified: Fri, 20 Dec 2019 12:01:44 GMT
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 10730
Keep-Alive: timeout=5, max=72
Connection: Keep-Alive
Content-Type: application/javascript
westernbioorganics.com/assets/js/main.js
200 OK 2.8 kB URL HTTP/1.1 westernbioorganics.com/assets/js/main.js
IP
ASN #394695 PUBLIC-DOMAIN-REGISTRY
File type ASCII text, with CRLF line terminators
Hash 50b6967ea422a6d3d2ca19792eb3ce2f
257fb7063999938c1cc7775b0f6937306fcb51f9
696cc4408cc0d7478009918e6fd14028fdc7f187a00f13ba3bf38a392a4a37fb
Analyzer Verdict Alert fortinet Malware
mnemonic_dns Sinkholed
quad9 Sinkholed
GET /assets/js/main.js HTTP/1.1
Host: westernbioorganics.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://westernbioorganics.com/
HTTP/1.1 200 OK
Date: Tue, 25 Oct 2022 04:45:33 GMT
Server: Apache
Last-Modified: Thu, 23 Apr 2020 15:05:52 GMT
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 2818
Keep-Alive: timeout=5, max=72
Connection: Keep-Alive
Content-Type: application/javascript
westernbioorganics.com/simplelightbox-master/simplelightbox-master/dist/simple-lightbox.js?v2.8.0
200 OK 19 kB URL HTTP/1.1 westernbioorganics.com/simplelightbox-master/simplelightbox-master/dist/simple-lightbox.js?v2.8.0
IP
ASN #394695 PUBLIC-DOMAIN-REGISTRY
File type Unicode text, UTF-8 text, with very long lines (1004), with CRLF, LF line terminators
Hash b696d8a07a031aaa3a2644804420f61e
3424cd7deb1e4d8b851c69b8fe45797115b96569
483964c3240c2535a87b9a80e95fd553ad2f235fcfc668175c18c7e52f82d5c0
Analyzer Verdict Alert fortinet Malware
mnemonic_dns Sinkholed
quad9 Sinkholed
GET /simplelightbox-master/simplelightbox-master/dist/simple-lightbox.js?v2.8.0 HTTP/1.1
Host: westernbioorganics.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://westernbioorganics.com/
HTTP/1.1 200 OK
Date: Tue, 25 Oct 2022 04:45:33 GMT
Server: Apache
Last-Modified: Fri, 28 Jan 2022 14:17:18 GMT
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
Keep-Alive: timeout=5, max=72
Connection: Keep-Alive
Transfer-Encoding: chunked
Content-Type: application/javascript
westernbioorganics.com/assets/css/plugins/slick-theme.css
200 OK 469 B URL HTTP/1.1 westernbioorganics.com/assets/css/plugins/slick-theme.css
IP
ASN #394695 PUBLIC-DOMAIN-REGISTRY
Hash 3e6f0ecba66c8112c020b0af125e251a
489046790f946973f058523ffaf04342c1522099
d5bff3d0f4a664a76be23e85cee5b3df5fa9286fb767913f57d3830100bb78b0
Analyzer Verdict Alert mnemonic_dns Sinkholed
quad9 Sinkholed
GET /assets/css/plugins/slick-theme.css HTTP/1.1
Host: westernbioorganics.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://westernbioorganics.com/
HTTP/1.1 200 OK
Date: Tue, 25 Oct 2022 04:45:33 GMT
Server: Apache
Last-Modified: Tue, 21 Jan 2020 16:12:50 GMT
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 469
Keep-Alive: timeout=5, max=70
Connection: Keep-Alive
Content-Type: text/css
westernbioorganics.com/assets/css/plugins/ion.rangeSlider.min.css
200 OK 3.2 kB URL HTTP/1.1 westernbioorganics.com/assets/css/plugins/ion.rangeSlider.min.css
IP
ASN #394695 PUBLIC-DOMAIN-REGISTRY
File type Unicode text, UTF-8 text, with very long lines (11083), with no line terminators
Hash 380f162bead5917ff22cd422450d1460
f48195b85624d7beb4c66d6797e4fc17699d1e4f
37acc0101bb8f5d6093f213467588a11ce0fa5b7bda280f1ca2fad4d176e7db2
Analyzer Verdict Alert mnemonic_dns Sinkholed
quad9 Sinkholed
GET /assets/css/plugins/ion.rangeSlider.min.css HTTP/1.1
Host: westernbioorganics.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://westernbioorganics.com/
HTTP/1.1 200 OK
Date: Tue, 25 Oct 2022 04:45:33 GMT
Server: Apache
Last-Modified: Fri, 20 Dec 2019 12:01:44 GMT
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 3173
Keep-Alive: timeout=5, max=72
Connection: Keep-Alive
Content-Type: text/css
push.services.mozilla.com/
101 Switching Protocols 0 B URL HTTP/1.1 push.services.mozilla.com/
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET / HTTP/1.1
Host: push.services.mozilla.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Sec-WebSocket-Version: 13
Origin: wss://push.services.mozilla.com/
Sec-WebSocket-Protocol: push-notification
Sec-WebSocket-Extensions: permessage-deflate
Sec-WebSocket-Key: 96dHiYBDiboTSE47GmZgEw==
Connection: keep-alive, Upgrade
Sec-Fetch-Dest: websocket
Sec-Fetch-Mode: websocket
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
Upgrade: websocket
HTTP/1.1 101 Switching Protocols
Connection: Upgrade
Upgrade: websocket
Sec-WebSocket-Accept: frPR2sK6FUnJiA8oDtrDW3rEk0I=
westernbioorganics.com/assets/img/herbal.png
200 OK 3.4 kB URL HTTP/1.1 westernbioorganics.com/assets/img/herbal.png
IP
ASN #394695 PUBLIC-DOMAIN-REGISTRY
File type PNG image data, 128 x 128, 8-bit/color RGBA, non-interlaced\012- data
Hash 1c36b33a83d1881b952c120d6f94af29
a9731b80b0cd7668afec1f5acc11086ba1752a8c
356ccf7841f72ddfbc3c0c942b91ca4f8bc1cfd07076596140a20bec545b5835
Analyzer Verdict Alert mnemonic_dns Sinkholed
quad9 Sinkholed
GET /assets/img/herbal.png HTTP/1.1
Host: westernbioorganics.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://westernbioorganics.com/
HTTP/1.1 200 OK
Date: Tue, 25 Oct 2022 04:45:33 GMT
Server: Apache
Last-Modified: Fri, 29 Jan 2021 12:19:22 GMT
Accept-Ranges: bytes
Content-Length: 3434
Keep-Alive: timeout=5, max=69
Connection: Keep-Alive
Content-Type: image/png
westernbioorganics.com/assets/img/think.png
200 OK 3.9 kB URL HTTP/1.1 westernbioorganics.com/assets/img/think.png
IP
ASN #394695 PUBLIC-DOMAIN-REGISTRY
File type PNG image data, 128 x 128, 8-bit/color RGBA, non-interlaced\012- data
Hash 861f1794e4ca0464e6bff0e8a0c9fa64
1d9741c8106997ec595d874166e05aa8a0488c00
f728a5c1aa75c71aee59b0225152be03baccf576b96c712a69aea7e7ef75d04e
Analyzer Verdict Alert mnemonic_dns Sinkholed
quad9 Sinkholed
GET /assets/img/think.png HTTP/1.1
Host: westernbioorganics.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://westernbioorganics.com/
HTTP/1.1 200 OK
Date: Tue, 25 Oct 2022 04:45:33 GMT
Server: Apache
Last-Modified: Fri, 29 Jan 2021 12:19:52 GMT
Accept-Ranges: bytes
Content-Length: 3859
Keep-Alive: timeout=5, max=71
Connection: Keep-Alive
Content-Type: image/png
westernbioorganics.com/assets/img/nutrition.png
200 OK 7.1 kB URL HTTP/1.1 westernbioorganics.com/assets/img/nutrition.png
IP
ASN #394695 PUBLIC-DOMAIN-REGISTRY
File type PNG image data, 256 x 256, 8-bit/color RGBA, non-interlaced\012- data
Hash 888ccd604f4bdd8fe814356769f682fc
cd1284a57113c2387fdac5a8c0d95ebfd21a0676
b85d650f0bb7b73d1d9d2f3aee8ddf8e5bb14b83c563d9c288bf7eb0bc1e8c90
Analyzer Verdict Alert mnemonic_dns Sinkholed
quad9 Sinkholed
GET /assets/img/nutrition.png HTTP/1.1
Host: westernbioorganics.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://westernbioorganics.com/
HTTP/1.1 200 OK
Date: Tue, 25 Oct 2022 04:45:33 GMT
Server: Apache
Last-Modified: Tue, 08 Mar 2022 13:11:38 GMT
Accept-Ranges: bytes
Content-Length: 7088
Keep-Alive: timeout=5, max=71
Connection: Keep-Alive
Content-Type: image/png
westernbioorganics.com/assets/img/nwp.png
200 OK 15 kB URL HTTP/1.1 westernbioorganics.com/assets/img/nwp.png
IP
ASN #394695 PUBLIC-DOMAIN-REGISTRY
File type PNG image data, 256 x 256, 8-bit/color RGBA, non-interlaced\012- data
Hash c7aa155c6a12e2bf1ebb3560e770cfb2
ad92d09392fe460012366752af968262fe42f19a
54acedc1d9f823861d91482ebec8d150161300b07f1c907a25c54480e3c42aaa
Analyzer Verdict Alert mnemonic_dns Sinkholed
quad9 Sinkholed
GET /assets/img/nwp.png HTTP/1.1
Host: westernbioorganics.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://westernbioorganics.com/
HTTP/1.1 200 OK
Date: Tue, 25 Oct 2022 04:45:33 GMT
Server: Apache
Last-Modified: Tue, 08 Mar 2022 13:12:40 GMT
Accept-Ranges: bytes
Content-Length: 14879
Keep-Alive: timeout=5, max=71
Connection: Keep-Alive
Content-Type: image/png
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash eb9238eaa63063c98563a1961fbbfefa
9b23eea87129d9516b8e7527cce7b8b1efcfa1fe
ff87d571f813dd558347df32a52e27ebb6c66968a6d2e584e6b6467944ef40fb
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Tue, 25 Oct 2022 04:45:33 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash eb9238eaa63063c98563a1961fbbfefa
9b23eea87129d9516b8e7527cce7b8b1efcfa1fe
ff87d571f813dd558347df32a52e27ebb6c66968a6d2e584e6b6467944ef40fb
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Tue, 25 Oct 2022 04:45:33 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash eb9238eaa63063c98563a1961fbbfefa
9b23eea87129d9516b8e7527cce7b8b1efcfa1fe
ff87d571f813dd558347df32a52e27ebb6c66968a6d2e584e6b6467944ef40fb
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Tue, 25 Oct 2022 04:45:33 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash eb9238eaa63063c98563a1961fbbfefa
9b23eea87129d9516b8e7527cce7b8b1efcfa1fe
ff87d571f813dd558347df32a52e27ebb6c66968a6d2e584e6b6467944ef40fb
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Tue, 25 Oct 2022 04:45:33 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash eb9238eaa63063c98563a1961fbbfefa
9b23eea87129d9516b8e7527cce7b8b1efcfa1fe
ff87d571f813dd558347df32a52e27ebb6c66968a6d2e584e6b6467944ef40fb
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Tue, 25 Oct 2022 04:45:33 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
fonts.gstatic.com/s/opensans/v34/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTS-muw.woff2
200 OK 45 kB URL HTTP/2 fonts.gstatic.com/s/opensans/v34/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTS-muw.woff2
IP
File type Web Open Font Format (Version 2), TrueType, length 44856, version 1.0\012- data
Hash 565ce506190ad3af920b40baf1794cec
ad3cba5d06100e09449a864d3b5e58403b478b3d
8778e9af2422858d7052ff9a0f3c12c08ae976bdd6e0316db144cd5579cd97db
GET /s/opensans/v34/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTS-muw.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: http://westernbioorganics.com
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 44856
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 20 Oct 2022 05:42:51 GMT
expires: Fri, 20 Oct 2023 05:42:51 GMT
cache-control: public, max-age=31536000
age: 428562
last-modified: Mon, 15 Aug 2022 18:20:18 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
fonts.gstatic.com/s/montserrat/v25/JTUSjIg1_i6t8kCHKm459Wlhyw.woff2
200 OK 31 kB URL HTTP/2 fonts.gstatic.com/s/montserrat/v25/JTUSjIg1_i6t8kCHKm459Wlhyw.woff2
IP
File type Web Open Font Format (Version 2), TrueType, length 30928, version 1.0\012- data
Hash ac0d2859ea5f8fd6bcb3c305c08ec184
7f6c17e3e592cd8bd346b9cc261d8dd961b8aef7
ae919a7c9f25f0fd97fc18e398ae8e453fcaae487e4a4cb4f896e7fecde4a780
GET /s/montserrat/v25/JTUSjIg1_i6t8kCHKm459Wlhyw.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: http://westernbioorganics.com
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 30928
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 20 Oct 2022 16:40:18 GMT
expires: Fri, 20 Oct 2023 16:40:18 GMT
cache-control: public, max-age=31536000
age: 389115
last-modified: Mon, 11 Jul 2022 18:57:39 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash eb9238eaa63063c98563a1961fbbfefa
9b23eea87129d9516b8e7527cce7b8b1efcfa1fe
ff87d571f813dd558347df32a52e27ebb6c66968a6d2e584e6b6467944ef40fb
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Tue, 25 Oct 2022 04:45:33 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
westernbioorganics.com/assets/img/about-logo.jpg
200 OK 58 kB URL HTTP/1.1 westernbioorganics.com/assets/img/about-logo.jpg
IP
ASN #394695 PUBLIC-DOMAIN-REGISTRY
File type JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 1080x450, components 3\012- data
Hash 39d5899ef394933043fe7cc526cd0534
ce294e957ef12011a032604c693a39d0148e107c
2e68fde0fe4a323f80a987ee5d34af64724382b8e11fa094c1f9d4bf13d3fc6c
Analyzer Verdict Alert mnemonic_dns Sinkholed
quad9 Sinkholed
GET /assets/img/about-logo.jpg HTTP/1.1
Host: westernbioorganics.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://westernbioorganics.com/
HTTP/1.1 200 OK
Date: Tue, 25 Oct 2022 04:45:33 GMT
Server: Apache
Last-Modified: Fri, 08 Apr 2022 06:14:52 GMT
Accept-Ranges: bytes
Content-Length: 57862
Keep-Alive: timeout=5, max=71
Connection: Keep-Alive
Content-Type: image/jpeg
westernbioorganics.com/assets/img/ic-logo.png
200 OK 20 kB URL HTTP/1.1 westernbioorganics.com/assets/img/ic-logo.png
IP
ASN #394695 PUBLIC-DOMAIN-REGISTRY
File type PNG image data, 300 x 121, 8-bit/color RGBA, non-interlaced\012- data
Hash df412a963559dee66c5c624356a8bdb0
0169a0c47899a04adec25eeee887ccb6c5f6db42
6caf1222e6961486d68afe08bedd3af2f97e43754a9ee96b95c786e8fb096334
Analyzer Verdict Alert mnemonic_dns Sinkholed
quad9 Sinkholed
GET /assets/img/ic-logo.png HTTP/1.1
Host: westernbioorganics.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://westernbioorganics.com/
HTTP/1.1 200 OK
Date: Tue, 25 Oct 2022 04:45:33 GMT
Server: Apache
Last-Modified: Mon, 07 Mar 2022 16:40:52 GMT
Accept-Ranges: bytes
Content-Length: 19846
Keep-Alive: timeout=5, max=70
Connection: Keep-Alive
Content-Type: image/png
westernbioorganics.com/assets/img/growth.png
200 OK 11 kB URL HTTP/1.1 westernbioorganics.com/assets/img/growth.png
IP
ASN #394695 PUBLIC-DOMAIN-REGISTRY
File type PNG image data, 256 x 256, 8-bit/color RGBA, non-interlaced\012- data
Hash 6de58ee4ea6a553ad0e1716ae1108f1f
c5300e30ecfd9bd1d28164bca6980ebfd1c6e2a0
548e054a93ca4a0e40ec17a023e46e2c6f9021ef929c124f8a30a76f0d7cd5ba
Analyzer Verdict Alert mnemonic_dns Sinkholed
quad9 Sinkholed
GET /assets/img/growth.png HTTP/1.1
Host: westernbioorganics.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://westernbioorganics.com/
HTTP/1.1 200 OK
Date: Tue, 25 Oct 2022 04:45:33 GMT
Server: Apache
Last-Modified: Tue, 08 Mar 2022 12:51:28 GMT
Accept-Ranges: bytes
Content-Length: 10646
Keep-Alive: timeout=5, max=70
Connection: Keep-Alive
Content-Type: image/png
westernbioorganics.com/assets/fonts/font-awesome/webfonts/fa-brands-400.woff2
200 OK 64 kB URL HTTP/1.1 westernbioorganics.com/assets/fonts/font-awesome/webfonts/fa-brands-400.woff2
IP
ASN #394695 PUBLIC-DOMAIN-REGISTRY
File type Web Open Font Format (Version 2), TrueType, length 64144, version 1.0\012- data
Hash 6814d0e8136d34e313623eb7129d538e
d902f8db3e021155f177f698a252fb98d6e61768
4d0130d314f1669c9ea5a911d401d6250f96386a52b0c38f7b3fb43cdcd10589
Analyzer Verdict Alert fortinet Malware
mnemonic_dns Sinkholed
quad9 Sinkholed
GET /assets/fonts/font-awesome/webfonts/fa-brands-400.woff2 HTTP/1.1
Host: westernbioorganics.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Connection: keep-alive
Referer: http://westernbioorganics.com/assets/fonts/font-awesome/css/all.min.css
Cookie: _ga_BRMDVE1G0B=GS1.1.1666673131.1.0.1666673131.0.0.0; _ga=GA1.1.291536184.1666673132
HTTP/1.1 200 OK
Date: Tue, 25 Oct 2022 04:45:33 GMT
Server: Apache
Last-Modified: Thu, 23 Aug 2018 10:54:08 GMT
Accept-Ranges: bytes
Content-Length: 64144
Keep-Alive: timeout=5, max=68
Connection: Keep-Alive
Content-Type: font/woff2
westernbioorganics.com/assets/img/psp96-brand-product-image.jpg
200 OK 186 kB URL HTTP/1.1 westernbioorganics.com/assets/img/psp96-brand-product-image.jpg
IP
ASN #394695 PUBLIC-DOMAIN-REGISTRY
File type JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 640x283, components 3\012- data
Size 186 kB (185669 bytes)
Hash e6c8111c69dcd63bef656caf7fb1d87b
4f71c96dcda880440a553faab085821de4e09cb1
62eb9f00a537e90374cc862e170a558dcf334514a8f5ccc5bf5fdd5947bd1d1e
Analyzer Verdict Alert mnemonic_dns Sinkholed
quad9 Sinkholed
GET /assets/img/psp96-brand-product-image.jpg HTTP/1.1
Host: westernbioorganics.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://westernbioorganics.com/
HTTP/1.1 200 OK
Date: Tue, 25 Oct 2022 04:45:33 GMT
Server: Apache
Last-Modified: Tue, 08 Mar 2022 14:24:44 GMT
Accept-Ranges: bytes
Content-Length: 185669
Keep-Alive: timeout=5, max=71
Connection: Keep-Alive
Content-Type: image/jpeg
westernbioorganics.com/assets/fonts/font-awesome/webfonts/fa-solid-900.woff2
200 OK 62 kB URL HTTP/1.1 westernbioorganics.com/assets/fonts/font-awesome/webfonts/fa-solid-900.woff2
IP
ASN #394695 PUBLIC-DOMAIN-REGISTRY
File type Web Open Font Format (Version 2), TrueType, length 62472, version 1.0\012- data
Hash b75b4bfe0d58faeced5006c785eaae23
92da6e3c7121e21cdfde25ef08797a3937a683e1
5c7df99df232586111917083a85aa31b82ee29e48ca2990e13fae0c0663a923f
Analyzer Verdict Alert fortinet Malware
mnemonic_dns Sinkholed
quad9 Sinkholed
GET /assets/fonts/font-awesome/webfonts/fa-solid-900.woff2 HTTP/1.1
Host: westernbioorganics.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Connection: keep-alive
Referer: http://westernbioorganics.com/assets/fonts/font-awesome/css/all.min.css
Cookie: _ga_BRMDVE1G0B=GS1.1.1666673131.1.0.1666673131.0.0.0; _ga=GA1.1.291536184.1666673132
HTTP/1.1 200 OK
Date: Tue, 25 Oct 2022 04:45:33 GMT
Server: Apache
Last-Modified: Thu, 23 Aug 2018 10:54:08 GMT
Accept-Ranges: bytes
Content-Length: 62472
Keep-Alive: timeout=5, max=70
Connection: Keep-Alive
Content-Type: font/woff2
westernbioorganics.com/assets/img/antivirus.png
200 OK 13 kB URL HTTP/1.1 westernbioorganics.com/assets/img/antivirus.png
IP
ASN #394695 PUBLIC-DOMAIN-REGISTRY
File type PNG image data, 256 x 256, 8-bit/color RGBA, non-interlaced\012- data
Hash 751cb148b6a5f3361f7b2111aea7e2bf
1c88285fe9f068938f91d5ede218d81135415a9a
840dc1a2ec5969f93737183e8246adaabbd18db8196ce742f2b63a4e8aca729c
Analyzer Verdict Alert mnemonic_dns Sinkholed
quad9 Sinkholed
GET /assets/img/antivirus.png HTTP/1.1
Host: westernbioorganics.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://westernbioorganics.com/
HTTP/1.1 200 OK
Date: Tue, 25 Oct 2022 04:45:33 GMT
Server: Apache
Last-Modified: Tue, 08 Mar 2022 12:50:52 GMT
Accept-Ranges: bytes
Content-Length: 12903
Keep-Alive: timeout=5, max=69
Connection: Keep-Alive
Content-Type: image/png
westernbioorganics.com/assets/img/market-research.png
200 OK 4.7 kB URL HTTP/1.1 westernbioorganics.com/assets/img/market-research.png
IP
ASN #394695 PUBLIC-DOMAIN-REGISTRY
File type PNG image data, 128 x 128, 8-bit/color RGBA, non-interlaced\012- data
Hash 5ea7752427e0c3ada19105a7c337f7eb
e82b4e3d75e748f42b18bfb5a4567b1b994ee452
70a3170328c7b06ebed8979e9ac1bcc8e57fea2d17270a5831e949ed32a471bf
Analyzer Verdict Alert mnemonic_dns Sinkholed
quad9 Sinkholed
GET /assets/img/market-research.png HTTP/1.1
Host: westernbioorganics.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://westernbioorganics.com/
HTTP/1.1 200 OK
Date: Tue, 25 Oct 2022 04:45:33 GMT
Server: Apache
Last-Modified: Fri, 29 Jan 2021 12:20:16 GMT
Accept-Ranges: bytes
Content-Length: 4698
Keep-Alive: timeout=5, max=67
Connection: Keep-Alive
Content-Type: image/png
westernbioorganics.com/assets/img/bg.png
200 OK 86 kB URL HTTP/1.1 westernbioorganics.com/assets/img/bg.png
IP
ASN #394695 PUBLIC-DOMAIN-REGISTRY
File type PNG image data, 1920 x 652, 4-bit colormap, non-interlaced\012- data
Hash a5930cfc56f1e0bfb60285132fec180e
33a59f10e0c96f751b09c81643ab10d740534feb
0be4164ec74c82e7b4b9d23bf6d6a967bc41603327aa78953c61a183d4018611
Analyzer Verdict Alert mnemonic_dns Sinkholed
quad9 Sinkholed
GET /assets/img/bg.png HTTP/1.1
Host: westernbioorganics.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://westernbioorganics.com/assets/css/style.css
Cookie: _ga_BRMDVE1G0B=GS1.1.1666673131.1.0.1666673131.0.0.0; _ga=GA1.1.291536184.1666673132
HTTP/1.1 200 OK
Date: Tue, 25 Oct 2022 04:45:33 GMT
Server: Apache
Last-Modified: Thu, 23 Apr 2020 10:25:48 GMT
Accept-Ranges: bytes
Content-Length: 85814
Keep-Alive: timeout=5, max=69
Connection: Keep-Alive
Content-Type: image/png
region1.google-analytics.com/g/collect?v=2&tid=G-BRMDVE1G0B>m=2oeaj0&_p=351988669&cid=291536184.1666673132&ul=en-us&sr=1280x1024&_s=1&sid=1666673131&sct=1&seg=0&dl=http%3A%2F%2Fwesternbioorganics.com%2F&dt=Western%20Bio%20Organics&en=page_view&_fv=1&_nsi=1&_ss=1&_ee=1
204 No Content 0 B URL HTTP/2 region1.google-analytics.com/g/collect?v=2&tid=G-BRMDVE1G0B>m=2oeaj0&_p=351988669&cid=291536184.1666673132&ul=en-us&sr=1280x1024&_s=1&sid=1666673131&sct=1&seg=0&dl=http%3A%2F%2Fwesternbioorganics.com%2F&dt=Western%20Bio%20Organics&en=page_view&_fv=1&_nsi=1&_ss=1&_ee=1
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /g/collect?v=2&tid=G-BRMDVE1G0B>m=2oeaj0&_p=351988669&cid=291536184.1666673132&ul=en-us&sr=1280x1024&_s=1&sid=1666673131&sct=1&seg=0&dl=http%3A%2F%2Fwesternbioorganics.com%2F&dt=Western%20Bio%20Organics&en=page_view&_fv=1&_nsi=1&_ss=1&_ee=1 HTTP/1.1
Host: region1.google-analytics.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: http://westernbioorganics.com
Connection: keep-alive
Referer: http://westernbioorganics.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Content-Length: 0
HTTP/2 204 No Content
access-control-allow-origin: http://westernbioorganics.com
date: Tue, 25 Oct 2022 04:45:34 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, no-store, must-revalidate
access-control-allow-credentials: true
content-type: text/plain
cross-origin-resource-policy: cross-origin
server: Golfe2
content-length: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
westernbioorganics.com/assets/img/gallery/plant_opening/thumb/10.jpg
200 OK 72 kB URL HTTP/1.1 westernbioorganics.com/assets/img/gallery/plant_opening/thumb/10.jpg
IP
ASN #394695 PUBLIC-DOMAIN-REGISTRY
File type JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=1, copyright=II*], baseline, precision 8, 600x400, components 3\012- data
Hash 309876a14aec47a5b1d50a968048c004
7dfc1b3e6abad3081f4d03da0b3fefe80296abc5
4f62161293d0cf9c49014e3511dd54dcb3b0712b08ebccc7c018e6ee958754a7
Analyzer Verdict Alert mnemonic_dns Sinkholed
quad9 Sinkholed
GET /assets/img/gallery/plant_opening/thumb/10.jpg HTTP/1.1
Host: westernbioorganics.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://westernbioorganics.com/
HTTP/1.1 200 OK
Date: Tue, 25 Oct 2022 04:45:34 GMT
Server: Apache
Last-Modified: Wed, 30 Mar 2022 14:06:32 GMT
Accept-Ranges: bytes
Content-Length: 71620
Keep-Alive: timeout=5, max=66
Connection: Keep-Alive
Content-Type: image/jpeg
westernbioorganics.com/assets/img/10xplus-brand-product-image.jpg
200 OK 219 kB URL HTTP/1.1 westernbioorganics.com/assets/img/10xplus-brand-product-image.jpg
IP
ASN #394695 PUBLIC-DOMAIN-REGISTRY
File type JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 640x283, components 3\012- data
Size 219 kB (219296 bytes)
Hash 2dae50f025e9aaffd4517e1d34492ae9
851ea4f584543eeb7bfaf10025ed0105bb80a688
f154a3aa2c656beb05ab8a7295aedef6900767b8ff3e31feb2f6e64e81fad214
Analyzer Verdict Alert mnemonic_dns Sinkholed
quad9 Sinkholed
GET /assets/img/10xplus-brand-product-image.jpg HTTP/1.1
Host: westernbioorganics.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://westernbioorganics.com/
HTTP/1.1 200 OK
Date: Tue, 25 Oct 2022 04:45:34 GMT
Server: Apache
Last-Modified: Tue, 08 Mar 2022 14:40:22 GMT
Accept-Ranges: bytes
Content-Length: 219296
Keep-Alive: timeout=5, max=69
Connection: Keep-Alive
Content-Type: image/jpeg
westernbioorganics.com/assets/img/gallery/plant_opening/thumb/16.jpg
200 OK 68 kB URL HTTP/1.1 westernbioorganics.com/assets/img/gallery/plant_opening/thumb/16.jpg
IP
ASN #394695 PUBLIC-DOMAIN-REGISTRY
File type JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=1, copyright=II*], baseline, precision 8, 600x400, components 3\012- data
Hash f025b8d5b00439b780b69d1e61b73c33
832f3c0cdc642807116a18aeb0e389881078b13f
4ed2aecfdc73904b93d664fbfa4319a75b5d566c0e83cca12aa801142de4e0a3
Analyzer Verdict Alert mnemonic_dns Sinkholed
quad9 Sinkholed
GET /assets/img/gallery/plant_opening/thumb/16.jpg HTTP/1.1
Host: westernbioorganics.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://westernbioorganics.com/
HTTP/1.1 200 OK
Date: Tue, 25 Oct 2022 04:45:34 GMT
Server: Apache
Last-Modified: Wed, 30 Mar 2022 14:05:10 GMT
Accept-Ranges: bytes
Content-Length: 68415
Keep-Alive: timeout=5, max=68
Connection: Keep-Alive
Content-Type: image/jpeg
westernbioorganics.com/assets/img/gallery/plant_opening/thumb/9.jpg
200 OK 75 kB URL HTTP/1.1 westernbioorganics.com/assets/img/gallery/plant_opening/thumb/9.jpg
IP
ASN #394695 PUBLIC-DOMAIN-REGISTRY
File type JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 600x400, components 3\012- data
Hash 474c48667dffb875a62a0b85112fac86
f46310c3993bd6c7751d8c3fd978d72278347bb7
440f7b11bae36ead7f4323fec9cefe02b658c00b3355d25f0dcda8c67c2d0970
Analyzer Verdict Alert mnemonic_dns Sinkholed
quad9 Sinkholed
GET /assets/img/gallery/plant_opening/thumb/9.jpg HTTP/1.1
Host: westernbioorganics.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://westernbioorganics.com/
HTTP/1.1 200 OK
Date: Tue, 25 Oct 2022 04:45:34 GMT
Server: Apache
Last-Modified: Wed, 30 Mar 2022 14:10:38 GMT
Accept-Ranges: bytes
Content-Length: 75021
Keep-Alive: timeout=5, max=68
Connection: Keep-Alive
Content-Type: image/jpeg
westernbioorganics.com/assets/img/gallery/articals/thumb/Image-%20(1).jpg
200 OK 68 kB URL HTTP/1.1 westernbioorganics.com/assets/img/gallery/articals/thumb/Image-%20(1).jpg
IP
ASN #394695 PUBLIC-DOMAIN-REGISTRY
File type JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 600x400, components 3\012- data
Hash 8e06de0185651a599a88e726c129a044
0dba9115c65d573091ea0608bd1eaf4e77550c96
ec3d73a8b1dbbef00721c608fdf5aac2a033afef10036d5c0ad83794b03dc27b
Analyzer Verdict Alert mnemonic_dns Sinkholed
quad9 Sinkholed
GET /assets/img/gallery/articals/thumb/Image-%20(1).jpg HTTP/1.1
Host: westernbioorganics.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://westernbioorganics.com/
HTTP/1.1 200 OK
Date: Tue, 25 Oct 2022 04:45:34 GMT
Server: Apache
Last-Modified: Wed, 30 Mar 2022 12:56:42 GMT
Accept-Ranges: bytes
Content-Length: 67963
Keep-Alive: timeout=5, max=65
Connection: Keep-Alive
Content-Type: image/jpeg
westernbioorganics.com/assets/img/z7-brand-product-image.jpg
200 OK 406 kB URL HTTP/1.1 westernbioorganics.com/assets/img/z7-brand-product-image.jpg
IP
ASN #394695 PUBLIC-DOMAIN-REGISTRY
File type JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 640x853, components 3\012- data
Size 406 kB (406275 bytes)
Hash e720ed7003e9b8c339f82fe39bd791be
92db1bca1aa5633f9c8fbba367fba2572fc28159
a93b62fd468cc00489a5c27b7032bec038ac3c81e654ad3e41e620195dfae8d7
Analyzer Verdict Alert mnemonic_dns Sinkholed
quad9 Sinkholed
GET /assets/img/z7-brand-product-image.jpg HTTP/1.1
Host: westernbioorganics.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://westernbioorganics.com/
HTTP/1.1 200 OK
Date: Tue, 25 Oct 2022 04:45:33 GMT
Server: Apache
Last-Modified: Tue, 08 Mar 2022 14:19:28 GMT
Accept-Ranges: bytes
Content-Length: 406275
Keep-Alive: timeout=5, max=70
Connection: Keep-Alive
Content-Type: image/jpeg
westernbioorganics.com/assets/img/gallery/articals/thumb/Image-%20(3).jpg
200 OK 50 kB URL HTTP/1.1 westernbioorganics.com/assets/img/gallery/articals/thumb/Image-%20(3).jpg
IP
ASN #394695 PUBLIC-DOMAIN-REGISTRY
File type JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 600x400, components 3\012- data
Hash 673b622d330de8e53c1003f0f0ca6a4f
a4c27a492e28932c997cba8cce5d26389e60b018
3c00d8a486081abfc870ca73c85fb44227d30681fc0ff75a922d1e27e3506723
Analyzer Verdict Alert mnemonic_dns Sinkholed
quad9 Sinkholed
GET /assets/img/gallery/articals/thumb/Image-%20(3).jpg HTTP/1.1
Host: westernbioorganics.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://westernbioorganics.com/
HTTP/1.1 200 OK
Date: Tue, 25 Oct 2022 04:45:34 GMT
Server: Apache
Last-Modified: Wed, 30 Mar 2022 12:58:46 GMT
Accept-Ranges: bytes
Content-Length: 49944
Keep-Alive: timeout=5, max=68
Connection: Keep-Alive
Content-Type: image/jpeg
westernbioorganics.com/assets/img/gallery/activities/thumb/1.jpg
200 OK 66 kB URL HTTP/1.1 westernbioorganics.com/assets/img/gallery/activities/thumb/1.jpg
IP
ASN #394695 PUBLIC-DOMAIN-REGISTRY
File type JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 600x400, components 3\012- data
Hash 07d38ae7bc8e356b3f9f5da65b5989bc
0084ba248dd37c97b2e88e3861cf5e4743750c19
5a3b1f2a7c3a77a29e9ea151628b35ec5f4c74e561072a5032bc2e5ca41f7792
Analyzer Verdict Alert mnemonic_dns Sinkholed
quad9 Sinkholed
GET /assets/img/gallery/activities/thumb/1.jpg HTTP/1.1
Host: westernbioorganics.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://westernbioorganics.com/
HTTP/1.1 200 OK
Date: Tue, 25 Oct 2022 04:45:34 GMT
Server: Apache
Last-Modified: Sat, 09 Apr 2022 10:11:01 GMT
Accept-Ranges: bytes
Content-Length: 66222
Keep-Alive: timeout=5, max=67
Connection: Keep-Alive
Content-Type: image/jpeg
westernbioorganics.com/assets/img/ic-logo-reverse.png
200 OK 12 kB URL HTTP/1.1 westernbioorganics.com/assets/img/ic-logo-reverse.png
IP
ASN #394695 PUBLIC-DOMAIN-REGISTRY
File type PNG image data, 300 x 121, 8-bit/color RGBA, non-interlaced\012- data
Hash adcdeec196c13cfa8cff78d1bb17c22d
3e484871ad7789cb26e5af1de083ffe69694d6b7
3bd47059061add459842cb08de3499bb9d98080ba6f0435ce207daae3d769303
Analyzer Verdict Alert mnemonic_dns Sinkholed
quad9 Sinkholed
GET /assets/img/ic-logo-reverse.png HTTP/1.1
Host: westernbioorganics.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://westernbioorganics.com/
HTTP/1.1 200 OK
Date: Tue, 25 Oct 2022 04:45:34 GMT
Server: Apache
Last-Modified: Tue, 08 Mar 2022 15:23:56 GMT
Accept-Ranges: bytes
Content-Length: 11634
Keep-Alive: timeout=5, max=67
Connection: Keep-Alive
Content-Type: image/png
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 398e3c90084d7d71fc1e9fd833116f5f
3e202da5559a8f219144adee3639d063a98559c0
724547db3ed9f1779308e9dd6604664e6ffa3580ca076fbdc1dfb1b75591bba4
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "724547DB3ED9F1779308E9DD6604664E6FFA3580CA076FBDC1DFB1B75591BBA4"
Last-Modified: Mon, 24 Oct 2022 00:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=9732
Expires: Tue, 25 Oct 2022 07:27:46 GMT
Date: Tue, 25 Oct 2022 04:45:34 GMT
Connection: keep-alive
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fa3694988-223c-4449-a1a5-28c1de7da771.jpeg
200 OK 11 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fa3694988-223c-4449-a1a5-28c1de7da771.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 1970a25715283fecf7a05a199bf4cae6
3a3005e722d2e89c9218c34ba283bbcde72e4bbc
624f6f86abe8c7cb8b24669851103baf152802c3ea915dcdea88ce984d468361
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fa3694988-223c-4449-a1a5-28c1de7da771.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 11051
x-amzn-requestid: 2eef9564-c660-421d-aff6-40644b72ffa1
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: aFfupETyoAMF3qg=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-634bacc3-48a6442d4ec030f50e8f8f13;Sampled=0
x-amzn-remapped-date: Sun, 16 Oct 2022 07:03:32 GMT
x-amz-cf-pop: SEA73-P1
x-cache: Hit from cloudfront
x-amz-cf-id: HgK4QTgdR6OSGV86ooPEJ0_jtGehzs1DHgeynAoCthtKlAAohrKVSg==
via: 1.1 912d83c7c9b4676eb19f09c9bfabda24.cloudfront.net (CloudFront), 1.1 9c675215120a4ade8754c4357ef2f3ea.cloudfront.net (CloudFront), 1.1 google
date: Mon, 24 Oct 2022 22:18:45 GMT
age: 23209
etag: "3a3005e722d2e89c9218c34ba283bbcde72e4bbc"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F0ab86bff-a678-4d24-8c74-b3d5fb6495e3.jpeg
200 OK 4.5 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F0ab86bff-a678-4d24-8c74-b3d5fb6495e3.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash b8f7dec290a5b32d2e1760ea01e0f160
bac869e97622c00d8ba2349ac03c6390229f8929
aa5d7fcb93818d291acce653a883c312595314685b9de29d788491d9310efcbb
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F0ab86bff-a678-4d24-8c74-b3d5fb6495e3.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
content-length: 4513
x-amzn-requestid: 32d9a3be-9964-4e53-a31c-ca4edffab306
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: acDxnGtTIAMFeVw=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-6354b33d-371bb2cb770b34624ec753de;Sampled=0
x-amzn-remapped-date: Sun, 23 Oct 2022 03:21:33 GMT
x-amz-cf-pop: SEA73-P1
x-cache: Hit from cloudfront
x-amz-cf-id: RRQUYwIoEf89Y2igmq4tQv6t8vlve9jeJrPqCE5uWe0yoYAO-ytvtA==
via: 1.1 1cc6ed0d2d3dd9529ce544f9dfe61a52.cloudfront.net (CloudFront), 1.1 5954c6394458ffb44c970b3819d7ff2a.cloudfront.net (CloudFront), 1.1 google
date: Mon, 24 Oct 2022 08:16:58 GMT
age: 73716
etag: "bac869e97622c00d8ba2349ac03c6390229f8929"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fda327ff0-bd82-4034-a53b-e04d5c486276.jpeg
200 OK 8.1 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fda327ff0-bd82-4034-a53b-e04d5c486276.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 531f350512ac7712d932234803aa4602
2fb4599ad3d513a160c1f29fefda27b45852c381
7a4da3420f736c098806676359b8ff80578a2e1e98fc0e20e45e2d6192e1d566
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fda327ff0-bd82-4034-a53b-e04d5c486276.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 8090
x-amzn-requestid: a84a2888-e0eb-40d3-8377-9c1ea2af733c
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: aVb2oH2uoAMFueA=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63520cf7-204870ee3f63ced427033eb5;Sampled=0
x-amzn-remapped-date: Fri, 21 Oct 2022 03:07:35 GMT
x-amz-cf-pop: SEA73-P1
x-cache: Hit from cloudfront
x-amz-cf-id: TkdgdFp1dXipnGokyVpkamtD5qLRUC7aNYJrX_OKkEujnQsplMsgXA==
via: 1.1 1de1880e08f1cae7d1aca174a29a5c1e.cloudfront.net (CloudFront), 1.1 5397b304713f6301c7c94ac084b6ed08.cloudfront.net (CloudFront), 1.1 google
date: Tue, 25 Oct 2022 04:35:17 GMT
age: 617
etag: "2fb4599ad3d513a160c1f29fefda27b45852c381"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fbdaf6e77-1767-457b-be73-df8fbb3ea07a.jpeg
200 OK 15 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fbdaf6e77-1767-457b-be73-df8fbb3ea07a.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 983b88b39042346cc10240d3db282ea4
bd6f82a917f5f4c9c86bfad52ddb137d1e648851
14bb4ea6ee7d95a5391ce82eb2473fbe250577a263e25a7348cda56a4ca218f2
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fbdaf6e77-1767-457b-be73-df8fbb3ea07a.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 14822
x-amzn-requestid: 9733fc7a-015f-4404-a314-962cf28b32b5
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: agBzWGJtIAMFe8A=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-635649ae-176dc0d327375f5b30a7704e;Sampled=0
x-amzn-remapped-date: Mon, 24 Oct 2022 08:15:42 GMT
x-amz-cf-pop: SEA19-C1, SEA19-C2
x-cache: Miss from cloudfront
x-amz-cf-id: qoEEEJKD1Rx1XiER9MI435Bwq7V-aosE8kO0B0-lr4vnPD3SSEjqkg==
via: 1.1 b4085435efbe95a420f374958bd145be.cloudfront.net (CloudFront), 1.1 82ea95080f526df99896343fb7269b06.cloudfront.net (CloudFront), 1.1 google
date: Mon, 24 Oct 2022 21:42:38 GMT
age: 25376
etag: "bd6f82a917f5f4c9c86bfad52ddb137d1e648851"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F5799e548-737d-43a5-ae0b-3ccb8e2f1daf.jpeg
200 OK 8.0 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F5799e548-737d-43a5-ae0b-3ccb8e2f1daf.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 6977b5f01197ed4e914157b59ce56c2a
0c4bc06cb32bae6cdcbd61fde8b6289fa901a0c2
98ed9be1f79f4d1ff9acd3dc22aa64f7e0218d7c4854fc7cb71e70dd341dd7ed
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F5799e548-737d-43a5-ae0b-3ccb8e2f1daf.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 8031
x-amzn-requestid: 39e6cba4-dc3b-4fe8-9f00-f9042b3dfb3a
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: ah3D7E2SoAMF_TA=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-6357054c-541d3ed176c9176913844804;Sampled=0
x-amzn-remapped-date: Mon, 24 Oct 2022 21:36:12 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Miss from cloudfront
x-amz-cf-id: j3sV_Wswao5mW-vx2uno8kuZE0qTvTaJYVB8MeVi1dolnHblN_uYwQ==
via: 1.1 eece508272520f70691e4eebdc5a6dea.cloudfront.net (CloudFront), 1.1 4f3feb5c4393987d42d1971d404d7cea.cloudfront.net (CloudFront), 1.1 google
date: Mon, 24 Oct 2022 21:45:49 GMT
etag: "0c4bc06cb32bae6cdcbd61fde8b6289fa901a0c2"
content-type: image/jpeg
age: 25185
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F9ac739ea-5d5d-4900-8e3f-c815c25f5c8d.png
200 OK 12 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F9ac739ea-5d5d-4900-8e3f-c815c25f5c8d.png
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 1f22a424f72f369a3511d6af25d67a82
e9aabd2daee2d2e6265a69e309542c5b5983d1f2
600f1a4989fe65b14cfe5234c8bc723834d53543026c13eaf8217b22d3a3a9a9
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F9ac739ea-5d5d-4900-8e3f-c815c25f5c8d.png HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 11916
x-amzn-requestid: 01915cb4-17aa-4fd6-95fc-384cf3daf698
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: ahf6ZGnvIAMFQ8w=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-6356e042-2bb80aca19d6c0ff133c75b7;Sampled=0
x-amzn-remapped-date: Mon, 24 Oct 2022 18:58:10 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Miss from cloudfront
x-amz-cf-id: 9ZJ7byRMNo0XYgeiiX8ntoPWazlzeVUn7nm4BvDhMppzqtAVpisATQ==
via: 1.1 c34da255183aa208dd1c722ff211f9b2.cloudfront.net (CloudFront), 1.1 a3bd0eb50c22e4d5fbda56a30b96002c.cloudfront.net (CloudFront), 1.1 google
date: Mon, 24 Oct 2022 20:31:12 GMT
age: 29662
etag: "e9aabd2daee2d2e6265a69e309542c5b5983d1f2"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash 6b183dc2bd0829ce80eb64a0a28d91e7
432f422b2723fdba3f195d9d28ab75492ad497d2
cae00bc5a9c3b9e166805e53c4175d96a0b739817d883f477102e1501a49ac57
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Tue, 25 Oct 2022 04:45:34 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.digicert.com/
200 OK 471 B IP
Hash c27e3c5c6d295dadcbe3de1db8e502a1
9445a0ccc587564b26bdabb2242435810e40b561
3feef44db56d609290b4bf648573edcef9a597ded596a936d6af96d4e91b3401
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 5646
Cache-Control: max-age=99470
Content-Type: application/ocsp-response
Date: Tue, 25 Oct 2022 04:45:34 GMT
Etag: "6356356e-1d7"
Expires: Wed, 26 Oct 2022 08:23:24 GMT
Last-Modified: Mon, 24 Oct 2022 06:49:18 GMT
Server: ECS (ska/F717)
X-Cache: HIT
Content-Length: 471
ocsp.digicert.com/
200 OK 471 B IP
Hash c27e3c5c6d295dadcbe3de1db8e502a1
9445a0ccc587564b26bdabb2242435810e40b561
3feef44db56d609290b4bf648573edcef9a597ded596a936d6af96d4e91b3401
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 5646
Cache-Control: max-age=99470
Content-Type: application/ocsp-response
Date: Tue, 25 Oct 2022 04:45:34 GMT
Etag: "6356356e-1d7"
Expires: Wed, 26 Oct 2022 08:23:24 GMT
Last-Modified: Mon, 24 Oct 2022 06:49:18 GMT
Server: ECS (ska/F717)
X-Cache: HIT
Content-Length: 471
westernbioorganics.com/assets/img/slide-image2.png
200 OK 2.3 MB URL HTTP/1.1 westernbioorganics.com/assets/img/slide-image2.png
IP
ASN #394695 PUBLIC-DOMAIN-REGISTRY
File type PNG image data, 1920 x 1280, 8-bit/color RGB, non-interlaced\012- data
Size 2.3 MB (2282433 bytes)
Hash e521059024953a907759e4038c96efef
3679f58d3596e1708f429c7638cfa83656f38822
b2648b6b887ad4449b8a00a0a6bfe2794c09633846a1f0703add13554eb78ffe
Analyzer Verdict Alert mnemonic_dns Sinkholed
quad9 Sinkholed
GET /assets/img/slide-image2.png HTTP/1.1
Host: westernbioorganics.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://westernbioorganics.com/
Cookie: _ga_BRMDVE1G0B=GS1.1.1666673131.1.0.1666673131.0.0.0; _ga=GA1.1.291536184.1666673132
HTTP/1.1 200 OK
Date: Tue, 25 Oct 2022 04:45:33 GMT
Server: Apache
Last-Modified: Mon, 28 Mar 2022 16:27:14 GMT
Accept-Ranges: bytes
Content-Length: 2282433
Keep-Alive: timeout=5, max=70
Connection: Keep-Alive
Content-Type: image/png
connect.facebook.net/en_GB/sdk.js
200 OK 1.7 kB URL HTTP/2 connect.facebook.net/en_GB/sdk.js
IP
File type ASCII text, with very long lines (1961)
Hash fdfec21014ef551d580fbd2647150a54
b62afd489d20f036839cc8c7d5c795c95c6f065f
9aca4361d02252825b04b2e0610fc29a63d893843f86f31b327d55d8ade3212f
GET /en_GB/sdk.js HTTP/1.1
Host: connect.facebook.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: http://westernbioorganics.com
Connection: keep-alive
Referer: http://westernbioorganics.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
vary: Accept-Encoding
content-encoding: gzip
access-control-expose-headers: X-FB-Content-MD5
x-fb-content-md5: b37884910e09805c2ba7585d4c98770d
etag: "a3a3e362a0dc21a9fc8a68015ffdac01"
content-type: application/x-javascript; charset=utf-8
timing-allow-origin: *
access-control-allow-origin: *
cross-origin-resource-policy: cross-origin
expires: Tue, 25 Oct 2022 04:55:07 GMT
cache-control: public,max-age=1200,stale-while-revalidate=3600
document-policy: force-load-at-top
cross-origin-opener-policy: same-origin-allow-popups
x-content-type-options: nosniff
x-fb-rlafr: 0
x-frame-options: DENY
strict-transport-security: max-age=31536000; preload; includeSubDomains
content-md5: /f7CEBTvVR1YD70mRxUKVA==
x-fb-debug: WY8vraxa5dqklWzQdXydEwm4h16wGBqMIYo88tP29QgfqAv1jfmNF5pYwsqvejkqI4X3fVpCjJifBQwFO926Ww==
content-length: 1687
x-fb-trip-id: 1679558926
date: Tue, 25 Oct 2022 04:45:34 GMT
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
connect.facebook.net/en_US/fbevents.js
200 OK 27 kB URL HTTP/2 connect.facebook.net/en_US/fbevents.js
IP
File type ASCII text, with very long lines (64348)
Hash 71875f848896ee82a106224e048bd060
277a624e507dff2cd9cff104aa0c5618ca76e105
a22635e404a419027fc88eee705d254910d05d481953733d5e1fda4bc6ab3c5b
GET /en_US/fbevents.js HTTP/1.1
Host: connect.facebook.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://westernbioorganics.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
vary: Accept-Encoding
content-encoding: gzip
content-type: application/x-javascript; charset=utf-8
content-security-policy: default-src facebook.net *.facebook.net fbcdn.net *.fbcdn.net fbsbx.com *.fbsbx.com data: blob: 'self';script-src *.fbcdn.net *.facebook.net 'unsafe-inline' 'unsafe-eval' blob: data: 'self';style-src data: blob: 'unsafe-inline' facebook.net *.facebook.net fbcdn.net *.fbcdn.net fbsbx.com *.fbsbx.com;connect-src *.fbcdn.net *.facebook.net wss://*.fbcdn.net attachment.fbsbx.com blob: 'self';block-all-mixed-content;upgrade-insecure-requests;report-uri https://www.facebook.com/csp/reporting/?m=c&minimize=0;
x-fb-rlafr: 0
document-policy: force-load-at-top
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin-allow-popups
pragma: public
cache-control: public, max-age=1200
expires: Sat, 01 Jan 2000 00:00:00 GMT
x-content-type-options: nosniff
x-xss-protection: 0
x-frame-options: DENY
strict-transport-security: max-age=31536000; preload; includeSubDomains
x-fb-debug: Cy1MBDWvoX3fOCcWTb83ak1Vkn2YeDJGgzj3I1izC6GDAsK/TmypdlYTUSdRBlW1s0l/WoEHCyqExA9k/iPg1A==
priority: u=3,i
content-length: 27027
x-fb-trip-id: 1679558926
date: Tue, 25 Oct 2022 04:45:34 GMT
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
www.google.com/pagead/conversion_async.js
200 OK 15 kB URL HTTP/2 www.google.com/pagead/conversion_async.js
IP
File type ASCII text, with very long lines (1654)
Hash 24fd6c715f1f63277e70251543da72e3
df812f6fc49802cdae539755e361201fa061ebc6
1c2948cf01342a560e7f3669ec3fbe69c4d565ee5e13d0873f89422b8c7c2503
GET /pagead/conversion_async.js HTTP/1.1
Host: www.google.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://westernbioorganics.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
p3p: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
vary: Accept-Encoding
date: Tue, 25 Oct 2022 04:45:34 GMT
expires: Tue, 25 Oct 2022 04:45:34 GMT
cache-control: private, max-age=3600
content-type: text/javascript; charset=UTF-8
etag: 10463233247470928422
x-content-type-options: nosniff
content-disposition: attachment; filename="f.txt"
content-encoding: br
server: cafe
content-length: 15169
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
westernbioorganics.com/favicon.png
200 OK 1.9 kB URL HTTP/1.1 westernbioorganics.com/favicon.png
IP
ASN #394695 PUBLIC-DOMAIN-REGISTRY
File type PNG image data, 24 x 24, 8-bit/color RGBA, non-interlaced\012- data
Hash 1854dad0573cda35d180a901ab713803
3aa5eee58649c11536308a11a807095b2836e890
5d0cd6863260bc72725e3f40c6e95de50f4d20f2f32e47c712ef7893f2b536eb
Analyzer Verdict Alert mnemonic_dns Sinkholed
quad9 Sinkholed
GET /favicon.png HTTP/1.1
Host: westernbioorganics.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://westernbioorganics.com/
Cookie: _ga_BRMDVE1G0B=GS1.1.1666673131.1.0.1666673131.0.0.0; _ga=GA1.1.291536184.1666673132; _gcl_au=1.1.206590735.1666673132
HTTP/1.1 200 OK
Date: Tue, 25 Oct 2022 04:45:34 GMT
Server: Apache
Last-Modified: Thu, 03 Mar 2022 14:50:34 GMT
Accept-Ranges: bytes
Content-Length: 1871
Keep-Alive: timeout=5, max=67
Connection: Keep-Alive
Content-Type: image/png
ocsp.digicert.com/
200 OK 471 B IP
Hash c27e3c5c6d295dadcbe3de1db8e502a1
9445a0ccc587564b26bdabb2242435810e40b561
3feef44db56d609290b4bf648573edcef9a597ded596a936d6af96d4e91b3401
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 5646
Cache-Control: max-age=99470
Content-Type: application/ocsp-response
Date: Tue, 25 Oct 2022 04:45:34 GMT
Etag: "6356356e-1d7"
Expires: Wed, 26 Oct 2022 08:23:24 GMT
Last-Modified: Mon, 24 Oct 2022 06:49:18 GMT
Server: ECS (ska/F717)
X-Cache: HIT
Content-Length: 471
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 4fe08d6ffc931438b886eb80f073ad2e
dae5e9eb8bd9053329d24a55b8017c8162cb21d2
49a26dbac4208540e0d361219db57bea3922a33b0fd692212fec7a61727d387c
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Tue, 25 Oct 2022 04:45:34 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 9ed554f0d1187302352f943e39d6c91a
10e1bb8702d0d14c56b659b1662b7c857484b0e7
2e1eda67a00dcf60ade2e3332b7f8b0c18c88ea6794fbb49fa9503e7c02236e1
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Tue, 25 Oct 2022 04:45:35 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
connect.facebook.net/en_GB/sdk.js?hash=b635c420825fc2d87c4fa232e8b61b9d
200 OK 87 kB URL HTTP/2 connect.facebook.net/en_GB/sdk.js?hash=b635c420825fc2d87c4fa232e8b61b9d
IP
File type ASCII text, with very long lines (13192)
Hash 8fdf683dabd6f5eabf97f19c43cd87ad
81e72fc1d9b972465e73e391a4f7a13eb0823e44
f1b1a0df6921d5ab29a521945713504483a2228408d6bcb2bd70ae8a716b9f11
GET /en_GB/sdk.js?hash=b635c420825fc2d87c4fa232e8b61b9d HTTP/1.1
Host: connect.facebook.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: http://westernbioorganics.com
Connection: keep-alive
Referer: http://westernbioorganics.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
vary: Accept-Encoding
content-encoding: gzip
access-control-expose-headers: X-FB-Content-MD5
x-fb-content-md5: 4d19a49191c4453c12da387943e3aa71
etag: "c1f67934d3d9649f97d9a2a5def1fa64"
content-type: application/x-javascript; charset=utf-8
timing-allow-origin: *
access-control-allow-origin: *
cross-origin-resource-policy: cross-origin
expires: Wed, 25 Oct 2023 04:13:42 GMT
cache-control: public,max-age=31536000,stale-while-revalidate=3600,immutable
document-policy: force-load-at-top
cross-origin-opener-policy: same-origin-allow-popups
x-content-type-options: nosniff
x-fb-rlafr: 0
x-frame-options: DENY
strict-transport-security: max-age=31536000; preload; includeSubDomains
content-md5: j99oPavW9eq/l/GcQ82HrQ==
x-fb-debug: YmDOTetqtjx6ygyIMS8KYSmaMQtukNbVPe6UYYxZuRRPzqX0mRK6TZ1ceFei5DEXwi5IWo69Q9T93Uj2EEeRFw==
content-length: 86942
x-fb-trip-id: 1679558926
date: Tue, 25 Oct 2022 04:45:35 GMT
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 5ce788cdd348a769704a7f874b5a2474
4a4dfb44c394a90c5f56af273be8e0924535b8a5
a6ccf1a057148266591bc317c4f8225d00cd81880c559db08f824012f0c397d5
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Tue, 25 Oct 2022 04:45:35 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
googleads.g.doubleclick.net/pagead/viewthroughconversion/357309426/?random=1666673133215&cv=9&fst=1666673133215&num=1&fmt=3&value=0&label=IOcQCKvUs7oDEPK3sKoB&bg=ffffff&guid=ON&resp=GooglemKTybQhCsO&u_h=1024&u_w=1280&u_ah=1002&u_aw=1280&u_cd=24&u_his=1&u_tz=0&u_java=false&u_nplug=0&u_nmime=0>m=2wgaj0&sendb=1&ig=0&frm=0&url=http%3A%2F%2Fwesternbioorganics.com%2F&tiba=Western%20Bio%20Organics&auid=206590735.1666673132&hn=www.google.com&bttype=purchase&gcp=1&ct_cookie_present=1&async=1
200 OK 42 B URL HTTP/2 googleads.g.doubleclick.net/pagead/viewthroughconversion/357309426/?random=1666673133215&cv=9&fst=1666673133215&num=1&fmt=3&value=0&label=IOcQCKvUs7oDEPK3sKoB&bg=ffffff&guid=ON&resp=GooglemKTybQhCsO&u_h=1024&u_w=1280&u_ah=1002&u_aw=1280&u_cd=24&u_his=1&u_tz=0&u_java=false&u_nplug=0&u_nmime=0>m=2wgaj0&sendb=1&ig=0&frm=0&url=http%3A%2F%2Fwesternbioorganics.com%2F&tiba=Western%20Bio%20Organics&auid=206590735.1666673132&hn=www.google.com&bttype=purchase&gcp=1&ct_cookie_present=1&async=1
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash d89746888da2d9510b64a9f031eaecd5
d5fceb6532643d0d84ffe09c40c481ecdf59e15a
ef1955ae757c8b966c83248350331bd3a30f658ced11f387f8ebf05ab3368629
GET /pagead/viewthroughconversion/357309426/?random=1666673133215&cv=9&fst=1666673133215&num=1&fmt=3&value=0&label=IOcQCKvUs7oDEPK3sKoB&bg=ffffff&guid=ON&resp=GooglemKTybQhCsO&u_h=1024&u_w=1280&u_ah=1002&u_aw=1280&u_cd=24&u_his=1&u_tz=0&u_java=false&u_nplug=0&u_nmime=0>m=2wgaj0&sendb=1&ig=0&frm=0&url=http%3A%2F%2Fwesternbioorganics.com%2F&tiba=Western%20Bio%20Organics&auid=206590735.1666673132&hn=www.google.com&bttype=purchase&gcp=1&ct_cookie_present=1&async=1 HTTP/1.1
Host: googleads.g.doubleclick.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://westernbioorganics.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
p3p: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
date: Tue, 25 Oct 2022 04:45:35 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, must-revalidate
content-type: image/gif
x-content-type-options: nosniff
server: cafe
content-length: 42
x-xss-protection: 0
set-cookie: test_cookie=CheckForPermission; expires=Tue, 25-Oct-2022 05:00:35 GMT; path=/; domain=.doubleclick.net; Secure; SameSite=none
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
www.google.no/pagead/1p-conversion/357309426/?random=1666673133215&cv=9&fst=1666673133215&num=1&value=0&label=IOcQCKvUs7oDEPK3sKoB&bg=ffffff&guid=ON&resp=GooglemKTybQhCsO&u_h=1024&u_w=1280&u_ah=1002&u_aw=1280&u_cd=24&u_his=1&u_tz=0&u_java=false&u_nplug=0&u_nmime=0>m=2wgaj0&sendb=1&ig=0&frm=0&url=http%3A%2F%2Fwesternbioorganics.com%2F&tiba=Western%20Bio%20Organics&auid=206590735.1666673132&hn=www.google.com&bttype=purchase&gcp=1&sscte=1&ct_cookie_present=1&async=1&rfmt=3&fmt=4&ipr=y&prhg=0
200 OK 63 B URL HTTP/2 www.google.no/pagead/1p-conversion/357309426/?random=1666673133215&cv=9&fst=1666673133215&num=1&value=0&label=IOcQCKvUs7oDEPK3sKoB&bg=ffffff&guid=ON&resp=GooglemKTybQhCsO&u_h=1024&u_w=1280&u_ah=1002&u_aw=1280&u_cd=24&u_his=1&u_tz=0&u_java=false&u_nplug=0&u_nmime=0>m=2wgaj0&sendb=1&ig=0&frm=0&url=http%3A%2F%2Fwesternbioorganics.com%2F&tiba=Western%20Bio%20Organics&auid=206590735.1666673132&hn=www.google.com&bttype=purchase&gcp=1&sscte=1&ct_cookie_present=1&async=1&rfmt=3&fmt=4&ipr=y&prhg=0
IP
File type ASCII text, with no line terminators
Hash 0339f8f57d1bf75003db591e28957e45
ae2286e497c9f76a02cb40c40a674b73bd293b76
609cd8e12464fe137cfaa9f1ab6637150d44e105559c901b6df50303fd05aa26
GET /pagead/1p-conversion/357309426/?random=1666673133215&cv=9&fst=1666673133215&num=1&value=0&label=IOcQCKvUs7oDEPK3sKoB&bg=ffffff&guid=ON&resp=GooglemKTybQhCsO&u_h=1024&u_w=1280&u_ah=1002&u_aw=1280&u_cd=24&u_his=1&u_tz=0&u_java=false&u_nplug=0&u_nmime=0>m=2wgaj0&sendb=1&ig=0&frm=0&url=http%3A%2F%2Fwesternbioorganics.com%2F&tiba=Western%20Bio%20Organics&auid=206590735.1666673132&hn=www.google.com&bttype=purchase&gcp=1&sscte=1&ct_cookie_present=1&async=1&rfmt=3&fmt=4&ipr=y&prhg=0 HTTP/1.1
Host: www.google.no
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: http://westernbioorganics.com/
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
p3p: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
date: Tue, 25 Oct 2022 04:45:35 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, no-store, must-revalidate
content-type: text/javascript; charset=UTF-8
content-security-policy: script-src 'none'; object-src 'none'
x-content-type-options: nosniff
content-disposition: attachment; filename="f.txt"
content-encoding: gzip
server: cafe
content-length: 63
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 9ed554f0d1187302352f943e39d6c91a
10e1bb8702d0d14c56b659b1662b7c857484b0e7
2e1eda67a00dcf60ade2e3332b7f8b0c18c88ea6794fbb49fa9503e7c02236e1
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Tue, 25 Oct 2022 04:45:35 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
westernbioorganics.com/assets/img/slide-image3.png
200 OK 2.3 MB URL HTTP/1.1 westernbioorganics.com/assets/img/slide-image3.png
IP
ASN #394695 PUBLIC-DOMAIN-REGISTRY
File type PNG image data, 1920 x 1280, 8-bit/color RGB, non-interlaced\012- data
Size 2.3 MB (2307608 bytes)
Hash b9065585200b5bc150cb56df896c187e
b0115ecbacd14446f54f860f3bcc97190dc88600
b46edb968ec45620e12b2d6635123b76eee68ea95152b335bfc7228856453c3f
Analyzer Verdict Alert mnemonic_dns Sinkholed
quad9 Sinkholed
GET /assets/img/slide-image3.png HTTP/1.1
Host: westernbioorganics.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://westernbioorganics.com/
Cookie: _ga_BRMDVE1G0B=GS1.1.1666673131.1.0.1666673131.0.0.0; _ga=GA1.1.291536184.1666673132
HTTP/1.1 200 OK
Date: Tue, 25 Oct 2022 04:45:34 GMT
Server: Apache
Last-Modified: Wed, 30 Mar 2022 16:28:40 GMT
Accept-Ranges: bytes
Content-Length: 2307608
Keep-Alive: timeout=5, max=64
Connection: Keep-Alive
Content-Type: image/png
westernbioorganics.com/assets/img/slide-image5.png
200 OK 2.9 MB URL HTTP/1.1 westernbioorganics.com/assets/img/slide-image5.png
IP
ASN #394695 PUBLIC-DOMAIN-REGISTRY
File type PNG image data, 1920 x 1280, 8-bit/color RGB, non-interlaced\012- data
Size 2.9 MB (2873058 bytes)
Hash a84c4e13371aeb0ffbcdf1e514fc466f
35f560922d7b1d0336afc6f598379212f45f3f78
417266a42745f220ac111c021c73617e8f306da7da2d4b4a92e1c352ff704d1d
Analyzer Verdict Alert mnemonic_dns Sinkholed
quad9 Sinkholed
GET /assets/img/slide-image5.png HTTP/1.1
Host: westernbioorganics.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://westernbioorganics.com/
Cookie: _ga_BRMDVE1G0B=GS1.1.1666673131.1.0.1666673131.0.0.0; _ga=GA1.1.291536184.1666673132
HTTP/1.1 200 OK
Date: Tue, 25 Oct 2022 04:45:34 GMT
Server: Apache
Last-Modified: Thu, 07 Apr 2022 14:08:00 GMT
Accept-Ranges: bytes
Content-Length: 2873058
Keep-Alive: timeout=5, max=69
Connection: Keep-Alive
Content-Type: image/png
www.facebook.com/tr/?id=1976729702485365&ev=PageView&dl=http%3A%2F%2Fwesternbioorganics.com%2F&rl=&if=false&ts=1666673133893&sw=1280&sh=1024&v=2.9.87&r=stable&ec=0&o=30&fbp=fb.1.1666673133891.170528556&it=1666673133212&coo=false&rqm=GET
200 OK 0 B URL HTTP/2 www.facebook.com/tr/?id=1976729702485365&ev=PageView&dl=http%3A%2F%2Fwesternbioorganics.com%2F&rl=&if=false&ts=1666673133893&sw=1280&sh=1024&v=2.9.87&r=stable&ec=0&o=30&fbp=fb.1.1666673133891.170528556&it=1666673133212&coo=false&rqm=GET
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /tr/?id=1976729702485365&ev=PageView&dl=http%3A%2F%2Fwesternbioorganics.com%2F&rl=&if=false&ts=1666673133893&sw=1280&sh=1024&v=2.9.87&r=stable&ec=0&o=30&fbp=fb.1.1666673133891.170528556&it=1666673133212&coo=false&rqm=GET HTTP/1.1
Host: www.facebook.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://westernbioorganics.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: text/plain
access-control-allow-origin:
access-control-allow-credentials: true
strict-transport-security: max-age=31536000; includeSubDomains
cross-origin-resource-policy: cross-origin
content-length: 0
server: proxygen-bolt
alt-svc: h3=":443"; ma=86400
date: Tue, 25 Oct 2022 04:45:35 GMT
X-Firefox-Spdy: h2
fonts.googleapis.com/css?family=Open+Sans:400,600,700&display=swap
200 OK 0 B URL HTTP/2 fonts.googleapis.com/css?family=Open+Sans:400,600,700&display=swap
IP
GET /css?family=Open+Sans:400,600,700&display=swap HTTP/1.1
Host: fonts.googleapis.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://westernbioorganics.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: text/css; charset=utf-8
access-control-allow-origin: *
timing-allow-origin: *
link: <https://fonts.gstatic.com>; rel=preconnect; crossorigin
strict-transport-security: max-age=31536000
expires: Tue, 25 Oct 2022 04:45:33 GMT
date: Tue, 25 Oct 2022 04:45:33 GMT
cache-control: private, max-age=86400
cross-origin-opener-policy: same-origin-allow-popups
cross-origin-resource-policy: cross-origin
content-encoding: gzip
server: ESF
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
fonts.googleapis.com/css?family=Montserrat:400,500,700&display=swap
200 OK 0 B URL HTTP/2 fonts.googleapis.com/css?family=Montserrat:400,500,700&display=swap
IP
GET /css?family=Montserrat:400,500,700&display=swap HTTP/1.1
Host: fonts.googleapis.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://westernbioorganics.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: text/css; charset=utf-8
access-control-allow-origin: *
timing-allow-origin: *
link: <https://fonts.gstatic.com>; rel=preconnect; crossorigin
strict-transport-security: max-age=31536000
expires: Tue, 25 Oct 2022 04:45:33 GMT
date: Tue, 25 Oct 2022 04:45:33 GMT
cache-control: private, max-age=86400
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin-allow-popups
content-encoding: gzip
server: ESF
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
162.222.227.139
157.240.221.35
23.36.77.32
0.0.0.0